[Git][security-tracker-team/security-tracker][master] Add CVE-2026-41650/node-webfont

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d5addc4b by Salvatore Bonaccorso at 2026-05-08T15:31:42+02:00
Add CVE-2026-41650/node-webfont

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -533,7 +533,9 @@ CVE-2026-41654 (Weblate is a web based localization tool. Prior to version 5.17.
 CVE-2026-41653 (BentoPDF is a client-side PDF toolkit that is self hostable. Prior to  ...)
 	NOT-FOR-US: BentoPDF
 CVE-2026-41650 (fast-xml-parser allows users to process XML from JS object without C/C ...)
-	TODO: check
+	- node-webfont <undetermined>
+	NOTE: https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-gh4j-gqv2-49f6
+	NOTE: node-webfont provides node-fast-xml-parser
 CVE-2026-41644 (monetr is a budgeting application for recurring expenses. Prior to ver ...)
 	NOT-FOR-US: monetr
 CVE-2026-41643 (GoBGP is an open source Border Gateway Protocol (BGP) implementation i ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d5addc4be33b2e80d632629b992ee19270d5f7be

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d5addc4be33b2e80d632629b992ee19270d5f7be
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260508/415c18b4/attachment.htm>